Protecting our customers' personal data is one of our core concerns.
This document applies to data that we collect online, on our websites and mobile applications, but also to data that we collect offline in resorts or on the ski area or during events.
It is our wish to provide you with all necessary information for a good understanding of how your data are used:
When you book and/or access our services, your personal data are both processed by:
Compagnie des Alpes, parent company of the Compagnie des Alpes Group, with capital of €25,266,567.50, registered with the Paris TCR 349 577 908, having its registered office at 50-51 boulevard Haussmann 75009 Paris,
And
ADS, affiliated company of the Compagnie des Alpes Group with capital of 17 756 460 Euros, registered with the TCR of Chambéry sous le numéro SIREN 076 520 568, having its registered office at Chalet des Villards - Arc 1800 - 73700 Bourg-Saint-Maurice
In this policy the word "we", refers to these two companies, which may act together as joint controllers for the processing operations indicated below.
While Compagnie des Alpes is in charge of the management and supervision of the IT system used to collect and process your data, it is nevertheless solely up to ADS, as an autonomous data controller, to manage the contractual relationship with you, to provide you with the ordered services, and to carry out marketing and advertising operations on its services and brands or ancillary services on the ski area (WiFi, photos, ski instructions).
Your data are processed jointly by ADS and Compagnie des Alpes, the parent company of the Compagnie des Alpes Group.
Within these two companies, your data are only accessible to a limited number of people, within specific departments (customer service, sales, accounting, IT, etc.), only if access to the data is necessary for the needs of their functions.
However, your data are not shared with other member companies of the Compagnie des Alpes group, unless you have expressly authorised us to do so.
Your data may also be shared with recipients outside of the Compagnie des Alpes Group:
With all of our technical service providers whose intervention is necessary in order to carry out the processing operations indicated below (IT service providers, payment service providers, etc.), for the purposes of processing your order and improving our services and exclusively within the limits of our instructions;
Only if you expressly give consent, to our partners, in order to receive more promotional offers and other good deals by e-mail (e.g. tourist office, ski school, etc.) from them. In this case, the list of partners will be communicated to you when obtaining your consent.
You may also receive communications relating to the activities of the ski resort where you purchased your ski lift packages. These communications are sent to you through our partnership with the tourist offices, with whom we write newsletters on the destination, as the ski lifts are a major component in the life of the ski resort. However, your data are not shared or reused by these partners in this context.
Where appropriate, with national or local authorities, if required by law or as part of an investigation and in accordance with regulations.
When you make purchases on our site or application, you may be offered the option of using alternative payment methods such as Apple Pay or Google Pay. The use of these payment methods is optional and depends on your choice. For your information, your bank card number is never transmitted. In order to be able to carry out the payment, the information below is transmitted to us:
From Apple: your postcode, your email address, the Apple account number, if necessary the delivery address
From Google: your postcode, the virtual account number, information on the payment method, your personal information
In addition, as part of the payment, we will be required to share the information below:
To Apple: the existence of the transaction, but not the nature of the items you purchased, nor their amounts
To Google: the existence of the transaction, its date, time and amount, the location and description of the merchant, a description of the goods and services purchased, name, email, payment method used)
For more information, you can refer to Apple's privacy policy and Google's terms and conditions of use as well as Google Pay's additional terms and conditions of use."
We may collect your personal data on different occasions:
Online:
On our website or mobile application, to order lift passes, receive our newsletters, log in to your account or take advantage of our digital services.
Within our ski resorts and ski areas:
When you use our facilities, alone or with friends and family: at the checkout, at our automatic terminals, photography spots, disabled access, access to reduced rates, use of our public WiFi, ski lockers, video surveillance.
During our interactions with you:
When you open or reply to a newsletter, take part in a satisfaction survey or participate in a contest. When you call customer services with a complaint.
Via our Partners:
When you access our services through an intermediary (e.g. travel agencies, partner distributors, tourist office).
We only collect the data that are strictly necessary for their use, and no more!
Depending on how you use the ski area, the ski resort or our websites, we may collect the following information:
Information required to create your customer account (surname, first name, e-mail address, date of birth, postal address)
Payment information
Telephone number
Photographs (for the purposes of ski lift passes or via devices or terminals made available in the ski area)
Visit data (use of the ski pass)
Browsing data on our website and mobile application (on this subject, see our information on cookies!)
Geolocation and geofence (for services on our mobile app only)
If necessary and depending on the subscribed product, the names and e-mail addresses of your relatives for groups and families
Supporting documents for access to discounted rates or priority access, the conditions of which are set out in detail on our website. You will be asked to present original supporting documents at our ticket offices within the ski resort. A copy of this proof may be made solely for the purposes of combating fraud.
At the end of the retention periods defined below, we delete your data from our systems or make it anonymous so that it can no longer be used to identify you.
Although the family dimension of our activities is at the heart of our concerns, we do not process any data specifically relating to children.
When our services are being used by persons under the age of 15, we recommend that they be accompanied by an adult. The consent of parents or legal guardians may be obtained when their personal data are collected, if necessary.
All of your personal data are stored exclusively on servers located within the territory of the European Union.
Although hosted within the territory of the European Union, these data may be accessible from third countries when we use technical service providers (e.g.: AWS, Microsoft, Google), which are based abroad (i.e.: United States, Israel). Any access from these countries is considered to be a data transfer but is necessary for the proper operation and maintenance of the IT tools that they offer. These service providers have real expertise that justifies their involvement.
We make every effort with these service providers to ensure that your data are protected in accordance with European regulations. These service providers only act within the framework of our instructions. Contracts are systematically signed with the latter, and transfers of personal data are governed by enhanced contractual clauses specifically designed for this purpose (standard contractual clauses - SCCs - published by the European Commission) where the laws of the country in question do not offer protection equivalent to the GDPR (so-called “adequate” countries). If necessary, additional technical or legal measures are put in place.
The security of your personal data is a central concern for the companies in the Compagnie des Alpes group, which pool their resources to ensure that you benefit from an appropriate level of security that is up to date with the state of the art.
In order to preserve the confidentiality and security of your personal data, and notably to protect them against unlawful or accidental destruction, accidental loss or alteration, or unauthorised disclosure or access, the Compagnie des Alpes Group takes appropriate technical and organisational measures, and imposes the same level of requirements on its subcontractors. These measures are adapted according to the sensitivity of the data processed and the risk level.
The Compagnie Group has put in place procedures to detect, analyse and monitor security incidents and any suspected breach of your personal data, and to be able to block access to the data at any time. Procedures for managing personal authorisations have also been put in place to ensure that access to data is as restricted as possible.
Despite our efforts, vulnerabilities may still be present in our systems. If you think that you have detected a vulnerability, please contact us using this form (vulnerability disclosure page), while respecting the principles described there.
You have a number of rights in relation to your personal data held by us:
The right to object: You no longer wish to receive our commercial communications, object to a decision related to your profiling, or withdraw consent
The right to rectify your data: change of home or e-mail address? let us know by keeping your details up to date!
The right to access your data: you may request a copy of all your personal data held by us, in an understandable format.
The right to erase your data: You wish to delete your entire customer account and erase all of your personal data in our possession. We will comply with your request, with the exception of accounting and tax records relating to your transactions, as well as those required for the creation of our evidence files (in the event of any legal proceedings), which must be retained.
The right to freeze the use of your data: if you are faced with a litigious situation and wish to prevent the deletion of your data, your data will be retained without being used.
The right to take your data: You wish to recover some of your data. You are then free to store them elsewhere or to transfer them easily from one system to another, so that they can be reused for other purposes.
You will find all of our contact details below for the exercise of these rights.
Would you like to stop receiving our newsletters? Delete your account?
We have appointed a Data Protection Officer to answer all of your questions and ensure the protection of your personal data.
To contact this person, click here!
Please fill in the form provided for this purpose, and your request will be processed within one month. For mobile apps, don't forget that you can change your authorisations at any time from your telephone's settings, for each of your apps.
You can also reach our DPO:
By post to the following address: DPO – Chalet des villards – Arc 1800 73700 BOURG-SAINT-MAURICE
or
By e-mail to the following address: ads.privacy@compagniedesalpes.fr
If there are serious doubts about your identity, and if it cannot be done otherwise, you may be asked to provide proof of identity for the processing of your request, simply to ensure that we are dealing with the right person.
If, despite our efforts, you feel that our response is incomplete, you can contact the CNIL https://www.cnil.fr/fr